use a commit sha for script instead of main (#67)

use a commit sha for script instead of main (#67) #118